diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
index ea12d49..173888a 100644
--- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
@@ -7,6 +7,8 @@ data:
   policy.csv: |
     p, role:app-manager, applications, *, */*, allow
     p, role:app-viewer, applications, get, */*, allow
+    g, nick@olb42.com, role:admin
     g, mcpserver, role:app-manager
     g, homepage, role:app-viewer
   policy.default: role:readonly
+  scopes: '[groups, email]'